Bug 538738 - Squid accelerator mode works only if port 80 is opened
Summary: Squid accelerator mode works only if port 80 is opened
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: squid
Version: 5.3
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Jiri Skala
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-11-19 09:16 UTC by Veaceslav Falico
Modified: 2018-10-27 14:59 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-30 08:18:35 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2010:0221 0 normal SHIPPED_LIVE Low: squid security and bug fix update 2010-03-29 12:32:22 UTC

Description Veaceslav Falico 2009-11-19 09:16:29 UTC
Description of problem:
Squid generates a 403 when you don't allow port 80 in acl in http_accelerator scheme without using port 80. per example:
squid.host:8080 <-> apache.host:8000
in this config you don't use port 80, but unless you allow it via acl you'll get 403.
it's fixed in upstream, via 
http://bugs.squid-cache.org/show_bug.cgi?id=2192

How reproducible:
Setup a squid and a http server.
squid:
http_port 8080 accel 
cache_peer 127.0.0.1 parent 8000 0 no-query originserver
http-server:
should be listening on localhost:8000

Actual results:
squid returns 403

Expected results:
page is served

Comment 4 Chris Ward 2010-02-11 10:26:31 UTC
~~ Attention Customers and Partners - RHEL 5.5 Beta is now available on RHN ~~

RHEL 5.5 Beta has been released! There should be a fix present in this 
release that addresses your request. Please test and report back results 
here, by March 3rd 2010 (2010-03-03) or sooner.

Upon successful verification of this request, post your results and update 
the Verified field in Bugzilla with the appropriate value.

If you encounter any issues while testing, please describe them and set 
this bug into NEED_INFO. If you encounter new defects or have additional 
patch(es) to request for inclusion, please clone this bug per each request
and escalate through your support representative.

Comment 7 errata-xmlrpc 2010-03-30 08:18:35 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2010-0221.html


Note You need to log in before you can comment on or make changes to this bug.